@@ -54,13 +54,13 @@ func generateCSR() (*certificates.CertificateSigningRequest, []byte, error) {
54
54
// Generate a new private key.
55
55
pk , err := ecdsa .GenerateKey (elliptic .P256 (), rand .Reader )
56
56
if err != nil {
57
- return nil , nil , fmt .Errorf ("generate key: %v " , err )
57
+ return nil , nil , fmt .Errorf ("generate key: %w " , err )
58
58
}
59
59
60
60
// Marshal pk -> der.
61
61
der , err := x509 .MarshalECPrivateKey (pk )
62
62
if err != nil {
63
- return nil , nil , fmt .Errorf ("marshal key to DER: %v " , err )
63
+ return nil , nil , fmt .Errorf ("marshal key to DER: %w " , err )
64
64
}
65
65
66
66
// Generate PEM key.
@@ -69,7 +69,7 @@ func generateCSR() (*certificates.CertificateSigningRequest, []byte, error) {
69
69
// Generate a x509 certificate signing request.
70
70
csrPEM , err := cert .MakeCSR (pk , & pkix.Name {CommonName : "client" , Organization : []string {systemPrivilegedGroup }}, nil , nil )
71
71
if err != nil {
72
- return nil , nil , fmt .Errorf ("create CSR from key: %v " , err )
72
+ return nil , nil , fmt .Errorf ("create CSR from key: %w " , err )
73
73
}
74
74
75
75
// Generate a Kubernetes CSR object.
@@ -99,7 +99,7 @@ func requestCSR(clientset kubernetes.Interface, csrObj *certificates.Certificate
99
99
// Create CSR.
100
100
csrObj , err := client .Create (context .TODO (), csrObj , metav1.CreateOptions {})
101
101
if err != nil {
102
- return nil , fmt .Errorf ("create CSR: %v " , err )
102
+ return nil , fmt .Errorf ("create CSR: %w " , err )
103
103
}
104
104
105
105
csrName := csrObj .Name
@@ -115,7 +115,7 @@ func requestCSR(clientset kubernetes.Interface, csrObj *certificates.Certificate
115
115
return true , nil
116
116
})
117
117
if err != nil {
118
- return nil , fmt .Errorf ("approve CSR: %v " , err )
118
+ return nil , fmt .Errorf ("approve CSR: %w " , err )
119
119
}
120
120
121
121
// Get CSR.
@@ -128,7 +128,7 @@ func requestCSR(clientset kubernetes.Interface, csrObj *certificates.Certificate
128
128
return true , nil
129
129
})
130
130
if err != nil {
131
- return nil , fmt .Errorf ("get CSR: %v " , err )
131
+ return nil , fmt .Errorf ("get CSR: %w " , err )
132
132
}
133
133
134
134
return csrObj .Status .Certificate , nil
@@ -166,17 +166,17 @@ func appendApprovalCondition(csr *certificates.CertificateSigningRequest) {
166
166
func CreateClusterCertificateCredentials (clientset kubernetes.Interface ) (certPEM []byte , keyPEM []byte , caPEM []byte , err error ) {
167
167
csrObj , keyPEM , err := generateCSR ()
168
168
if err != nil {
169
- return nil , nil , nil , fmt .Errorf ("generate CSR: %v " , err )
169
+ return nil , nil , nil , fmt .Errorf ("generate CSR: %w " , err )
170
170
}
171
171
172
172
certPEM , err = requestCSR (clientset , csrObj )
173
173
if err != nil {
174
- return nil , nil , nil , fmt .Errorf ("request CSR: %v " , err )
174
+ return nil , nil , nil , fmt .Errorf ("request CSR: %w " , err )
175
175
}
176
176
177
177
caPEM , err = getRootCA (clientset )
178
178
if err != nil {
179
- return nil , nil , nil , fmt .Errorf ("get root CA: %v " , err )
179
+ return nil , nil , nil , fmt .Errorf ("get root CA: %w " , err )
180
180
}
181
181
182
182
return certPEM , keyPEM , caPEM , nil
0 commit comments